Cisco Secure Email Threat Defense provides protection against email threats that compromise an organization’s brand and operations. Its advanced threat detection capabilities uncover known, emerging and targeted threats. And it expands the scope of organizations' defenses to detect dangerous threats and rapidly search for and remediate threats across security controls. Secure Email Threat Defense's Artificial Intelligence and machine…
N/A
Darktrace
Score 8.7 out of 10
N/A
Darktrace AI interrupts in-progress cyber-attacks, including ransomware, email phishing, and threats to cloud environments. It's able to detect and establish baselines for your organization so it can make the distinction between what is and what isn't normal network activity for your organization. This allows it to tackle complex cyber-attacks as they happen and prevent future cyber-attacks from happening.
From my point of view, Darktrace has excessive blocking which is usually very annoying, there are times when the emails I receive from clients to formalize a sale take it as spam and I even just open it. On the other hand, Cisco Secure Email hits the spot with the information …
I will certainly recommend Cisco Secure Email to my friends/colleagues, one look at the dashboard/statistics will actually convince any IT professional to use this product. We noticed an outstanding improvement in Email quality, most of the SPAM emails are caught, and our users have never been happier!
Darktrace is a product well suited for the vast majority of infrastructures and helps monitoring and responding to threats based on the network in a very elastic way. This is a product based on on-premise infrastructures that hosts its machines locally, of course it can be technically difficult to monitor an entire On-Cloud infrastructure but even there there's room for sensors and monitoring, not to mention the SaaS and mail integration that completes the product.
Manages Junk Mail Well-We configured and tested our configuration to filter out the majority of junk mail hitting our inboxes.
Manages Graymail-We configured and tested our Cisco ETD for graymail filtering and reduced the amount of unwanted advertising and other legitimate emails.
Creating unique policies that were tailored to block or allow emails from certain senders.
Stopped malicious email traffic (e.g., malicious attachments and links) with rules for identifying and stripping potentially malicious attachments or links.
Allows easy configuration for other email security measures such as SPF, DMARC and DKIM.
Cisco engineers provide an annual free security health check. We took advantage of several security health checks where Cisco certified engineers go over the security setting of our Cisco ETD. We were provided a written report that highlighted strengths and weaknesses of our Cisco ETD setup.
Monitoring email traffic flow is almost overwhelming with the amount of information you can obtain from the portal. This gives valuable information to IT staff in terms of volume and type of emails the company is receiving.
Uses it Al model UEBA to detect anomalies in the behaviour of not only the users in a corporate network but also the routers, servers, and endpoints in that network.
Provides a visualisation of both egress and outbound network traffics flowing in and out of the organisation.
Darktrace comes with it autonomous AI model detection and responses capabilities.
Darktrace as an AI next generation NDR solution, prevents ,contains and quarantines malicious traffics from and into the corporate network.
The creation of policies and order in which they are applied to incoming/outgoing email can sometimes be a little confusing.
Testing of rules and/or configuration settings are done live. Would be nice to have a way of testing a rule and/or configuration before going live if possible.
Searching and extracting emails with ease/simplicity for eDiscovery or security purposes would be an extra bonus.
Having an easier method for setting up and sending secure emails.
There are few areas that I would say need to be improved; their customer support portal allows you to log tickets with any suggestions or things you feel the product is missing, and they will generally show you how to achieve what you want, or in some cases, introduce it as a feature in a later update.
Haven't found an alternative product with the same features or quality, I have been renewing Cisco Secure Email for over 8 years and i am overly satisfied with what is offered. I will definitely recommended it to my peers.
Good interface, easy to use and set up. If there were any issues, there is very good documentation and videos that one can follow for additional setup and best practices. As typical with most Cisco solutions, there are more features than needed for our purposes but good to know they are there in case of future needs
Cisco always provides good support for all of their solutions. As usual, Cisco support is top notch, from their initial sales teams to the post support, we have always felt comfortable with using Cisco solutions. Their documentation is also very good, frequent updates to the documents with feature enhancements and support notes. All around very good suppot
Darktrace support is excellent in my experience. They send a competent engineer on-site to provide on-boarding training. They were also very responsive in responding to questions and concerns. Having an individual point of contact who is a competent network and security engineer is not a common experience, at least for me.
Implementation is straight forward and easy, advanced settings are super helpful especially scripting and custom filters, reporting is one of the coolest features to trace every step of sent/received emails. integration with internal email systems have never been easier, we are running Microsoft Exchange servers behind Cisco Secure Email with no problems.
The security teams also evaluated similar offerings but went with Cisco Secure Email since this comes from a big name and they wanted to ensure complete compliance and protection assurance. The primary reasons for selecting Cisco Secure Email were integration with office 365, hybrid deployment availability, and greater customization options available.
We did NOT select Darktrace. OSSIM/AlienVault is a more mature product and it provided better intelligence and reporting. The end user interface is much easier to use - and you can tell built form engineers who have had to do the work. My suggestion for anyone considering Darktrace, is to get the price upfront; do a 30/60 onsite trail; and do the same thing, at the same time, with AlienVault. AlientVault will win every time. I say that because that's exactly what I did.
Although Microsoft offers security controls with Office 365, security with Cisco Secure Email for our business email and protection against some advanced malware has more robust security features, such as automatic mailbox remediation and email intelligence top threats.
I currently have security and advanced malware protection to Office 365.
Lately, Cisco Secure Email had an update which added two new features that allows us to prevent phishing emails and protects the company's domain.
One big positive is how it helps us with the security assessments that clients have done on us. They are looking to see if we know how we might have unusual/malicious traffic running on the network.
If you have a small network and only need 1 appliance, it can be a good ROI and peace of mind.
You could go down a hole in trying to spend time looking at all of your traffic with this software. You need to focus only on what it is showing as potential bad traffic.
